CVE-2019-17514

Python 3.6 and 2 others: library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information…

CVE-2019-17514 is fixed in 38 products on 2 platforms, first by Python 3.6 3.6.1, released March 21, 2017. It is not reported as exploited. Patch Radar priority: High.

HighFixed on 2 platforms
CVSS
7.5
Negligible
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0467
91st percentile

library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-research results. NOTE: the effects of this documentation cross application domains, and thus it is likely that security-relevant code elsewhere is affected. This issue is not a Python implementation bug, and there are no reports that NMR researchers were specifically relying on library/glob.html. In other words, because the older documentation stated "finds all the pathnames matching a specified pattern according to the rules used by the Unix shell," one might have incorrectly inferred that the sorting that occurs in a Unix shell also occurred for glob.glob. There is a workaround in newer versions of Willoughby nmr-data_compilation-p2.py and nmr-data_compilation-p3.py, which call sort() directly.

Where it's fixed

ProductFixed inFixReleased
Windows apps
Python 3.6 3.6.1 Python 3.6 3.6.1 Mar 21, 2017
Python 3.7 3.7.1 Python 3.7 3.7.1 Oct 20, 2018
Python 3.8 3.8.1 Python 3.8 3.8.1 Dec 18, 2019
Linux
idle-python2.7 · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 idle-python2.7 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
idle-python2.7 · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 idle-python2.7 2.7.18-1~20.04.1 Jan 18, 2021
idle-python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 idle-python3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
idle-python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 idle-python3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
idle-python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 idle-python3.8 3.8.0-3~18.04 Oct 12, 2019
idle-python3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 idle-python3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython2.7 · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 libpython2.7 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
libpython2.7 · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 libpython2.7 2.7.18-1~20.04.1 Jan 18, 2021
libpython2.7-minimal · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 libpython2.7-minimal 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
libpython2.7-minimal · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 libpython2.7-minimal 2.7.18-1~20.04.1 Jan 18, 2021
libpython2.7-stdlib · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 libpython2.7-stdlib 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
libpython2.7-stdlib · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 libpython2.7-stdlib 2.7.18-1~20.04.1 Jan 18, 2021
libpython2.7-testsuite · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 libpython2.7-testsuite 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
libpython2.7-testsuite · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 libpython2.7-testsuite 2.7.18-1~20.04.1 Jan 18, 2021
libpython3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-minimal 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-stdlib 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-testsuite 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-stdlib 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-testsuite 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 libpython3.8 3.8.0-3~18.04 Oct 12, 2019
libpython3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 libpython3.8-minimal 3.8.0-3~18.04 Oct 12, 2019
libpython3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-minimal 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 libpython3.8-stdlib 3.8.0-3~18.04 Oct 12, 2019
libpython3.8-stdlib · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-stdlib 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 libpython3.8-testsuite 3.8.0-3~18.04 Oct 12, 2019
libpython3.8-testsuite · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-testsuite 3.8.2-1ubuntu1.2 Jul 13, 2020
python2.7 · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 python2.7 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
python2.7 · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 python2.7 2.7.18-1~20.04.1 Jan 18, 2021
python2.7-examples · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 python2.7-examples 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
python2.7-examples · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 python2.7-examples 2.7.18-1~20.04.1 Jan 18, 2021
python2.7-minimal · Ubuntu 18.04.6 LTS (bionic) 2.7.17-1~18.04ubuntu1.1 python2.7-minimal 2.7.17-1~18.04ubuntu1.1 Jul 13, 2020
python2.7-minimal · Ubuntu 20.04 LTS (focal) 2.7.18-1~20.04.1 python2.7-minimal 2.7.18-1~20.04.1 Jan 18, 2021
python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-examples · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-examples 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-minimal 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-venv · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-venv 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-examples · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-examples 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-venv · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-venv 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 python3.8 3.8.0-3~18.04 Oct 12, 2019
python3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-examples · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 python3.8-examples 3.8.0-3~18.04 Oct 12, 2019
python3.8-examples · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-examples 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 python3.8-minimal 3.8.0-3~18.04 Oct 12, 2019
python3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-minimal 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-venv · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3~18.04 python3.8-venv 3.8.0-3~18.04 Oct 12, 2019
python3.8-venv · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-venv 3.8.2-1ubuntu1.2 Jul 13, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.